Last Updated: January 27, 2026

Version: 1.0

Arceio Ltd (“we”, “us”, “our”) is committed to protecting your privacy in compliance with the UK GDPR and Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with our website (www.arceio.com), services, or contact us.

1. Data Controller

Arceio Ltd, registered in England (Company No. 15813190), Milton Keynes, Buckinghamshire, United Kingdom.

Data Protection Lead: (info@arceio.com).

2. Personal Data We Collect

We collect limited personal data for legitimate business purposes, no sensitive/special category data processed.

3. Legal Basis for Processing

    •   Legitimate Interests (Art 6(1)(f)): Responding to enquiries, site security (balanced via LIA).

    •   Contract (Art 6(1)(b)): Delivering advisory services.

    •   Consent (Art 6(1)(a)): Marketing emails (opt-in only).

4. How We Use Your Data

    •   Respond to enquiries and service discussions.

    •   Deliver contracted advisory services (strategy, commercial, policy).

    •   Send service updates (opt-in only).

    •   Ensure website security and performance.

    •   Comply with legal/tax obligations.

5. Data Sharing

We do not sell data. Limited sharing with:

    •   Trusted subcontractors (e.g., IONOS hosting, Microsoft 365) - UK-based, DPA-bound.

    •   No routine international transfers (Africa/Europe clients processed UK-only).

    •   Safeguards: SCCs if needed (Art 46 UK GDPR).

6. Data Retention

    •   Enquiries: 6 years post-last contact (limitation period).

    •   Contracts: 7 years post-termination (tax/audit).

    •   Marketing: Until unsubscribe.
Secure deletion thereafter.

7. Your Rights (Arts 15-22 UK GDPR)

    •   Access: Free SAR (30 days).

    •   Rectification/Erasure: Update/delete data.

    •   Restriction/Portability/Objection: Available on request.

    •   Withdraw Consent: Email info@arceio.com - no detriment.

Contact: info@arceio.com. Complaints: ICO (ico.org.uk).

8. Security Measures

    •   Encryption: AES-256 at rest, TLS 1.3 in transit.

    •   Access: MFA, role-based for Microsoft 365/IONOS.

    •   Backups: Encrypted, daily, UK cloud.

    •   Training: Annual GDPR refreshers.

    •   Testing: Annual pen-tests/DPIAs for high-risk.

9. Cookies

Minimal cookies:

    •   Essential (session management).

    •   Analytics (Google Analytics - IP anonymised, opt-out available). Manage via browser settings.

10. Third-Party Links

Links to LinkedIn/Calendly - review their policies.

11. Changes to Policy

Updates posted here; material changes notified via site notice.

12. Contact Us

Arceio Ltd

135 Western Road, Milton Keynes, Buckinghamshire, United Kingdom

Email: info@arceio.com